vulnerability

CVE-2018-7248 - Local and Domain user enumeration via unsecured ManageEngine ServiceDesk Plus API Endpoint

🤠 A tool to search vulnerable devices or specific services on Shodan using Shodan dorks or custom query.

Apache 2.4.49; 2.4.50 - CVE-2021-41773; CVE-2021-42013, Path Traversal & Remote Code Execution via CGI

CVE-2022-26134 - Atlassian Confluence unauthenticated OGNL injection vulnerability (RCE).

D(HE)ater is a proof of concept implementation of the D(HE)at attack (CVE-2002-20001) through which denial-of-service can be performed by enforcing the Diffie-Hellman key exchange.